exploitDog

CVE-2019-12905

Опубликовано: 20 июн. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed in FileRun 2019.06.01.

Ссылки

http://packetstormsecurity.com/files/158173/FileRun-2019.05.21-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/EmreOvunc/FileRun-Vulnerabilities/
Exploit
Third Party Advisory
https://github.com/EmreOvunc/FileRun-Vulnerabilities/issues/3
Third Party Advisory
http://packetstormsecurity.com/files/158173/FileRun-2019.05.21-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/EmreOvunc/FileRun-Vulnerabilities/
Exploit
Third Party Advisory
https://github.com/EmreOvunc/FileRun-Vulnerabilities/issues/3
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:afian:filerun:*:*:*:*:*:*:*:*

Версия от 2019.05.21 (включая) до 2019.06.01 (исключая)

EPSS

Процентиль: 88%

0.03673

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-6j8f-rrc2-6w8r

github

больше 3 лет назад

FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI.

EPSS

Процентиль: 88%

0.03673

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79